dsh-meme

DeepSeek Harness 的表情包插件——找得到、发得出、学得会

PluginContent

Verification

L2 · Structured

Security

Low

Health

Active

Trust

Silver

What it does

DeepSeek Harness 的表情包插件——找得到、发得出、学得会

dsh plugin --profile web add dsh-meme

Install method: npm · not yet tested in container (L3+)

DSH Version	Status
not stated	Declared — not tested

Automated static scan, not manual review.

DSH.SOOUTDATEDSCAN9 FILES

97e629

Security reviewAutomated review · daily

OUTDATED

The repository has new commits since the scan. The previous result no longer describes the current code; a fresh scan is pending.

0 critical·0 warning·10 info·9 files scanned

Version binding

plugin version0.1.27dsh manifest

scanned commit97e6295a65092026-08-18

latest commit9da9b656b837

The scan result is only valid for the scanned commit. If the latest commit differs, the badge shows outdated until the daily pipeline rescans.

Disclaimer: automated static analysis, not a security guarantee. Always review what you install.

Risk: Low0 critical · 0 warning · 10 info

• Static heuristic scan: done (9 files)

• Dependency vulnerabilities: requires deep audit (L3+)

• Permission sandboxing: requires runtime testing (L4+)

infoMakes network requests (fetch / axios)client.js:68
return (await fetch('/dsh-memes-api?' + qs.toString())).json()
infoMakes network requests (fetch / axios)client.js:71
return (await fetch('/dsh-memes-api', {
infoHardcoded IP addresscordis/host.js:272
const host = webServer.host === '0.0.0.0' ? '127.0.0.1' : webServer.host
infoMakes network requests (fetch / axios)entry/client.js:43
return (await fetch('/dsh-memes-api?' + qs.toString())).json()
infoMakes network requests (fetch / axios)entry/client.js:46
return (await fetch('/dsh-memes-api', {
infoReads process.envindex.js:138
const settingsFile = join(process.env.HOME || '.', '.dsh', 'dsh-expression.json')
infoReads process.envindex.js:144
mkdirSync(join(process.env.HOME || '.', '.dsh'), { recursive: true })
infoReads process.envindex.js:499
const target = join(process.env.HOME || '.', '.dsh', 'meme-packs', name)
infoMakes network requests (fetch / axios)index.js:336
const res = await fetch(imageUrl, { signal: AbortSignal.timeout(15000), redirect: 'follow' })
infoHardcoded IP addressindex.js:177
const host = webServer.host === '0.0.0.0' ? '127.0.0.1' : webServer.host

Heuristic static scan — may produce false positives. Review the source yourself before trusting.

Last commit 2026-08-18 · activity: Active

• Repo created: 2026-08-18

• Stars: ★ 5 · Forks: 2

• Health: Active — committed within last 30 days